Safe Exam Browser: Difference between revisions

From MoodleDocs
mNo edit summary
(Added documentation on how to actually get a template into the admin page.)
 
(19 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{Quiz}}
{{Quiz}}
Safe Exam Browser (SEB) can work with Moodle to control what a student can access during a Moodle quiz attempt. There are two options for how to activate SEB support in Moodle. One is the built-in support, which must be enabled in ''Settings > Site administration > Development > Experimental > Experimental settings''. This adds the choice 'Require Safe Exam Browser' to the 'Browser security' field on the quiz settings form. The second option is more secure: Install the [https://github.com/moodleou/moodle-quizaccess_safeexambrowser quiz access rule plugin] in Moodle. It will give you the option to copy-paste a hash key (called "Browser Exam Key") generated from SEB settings and the application code signature into the quiz settings. Only students using an approved version of SEB and the correct settings will be able to access the quiz.
The quiz has built in settings to allow secure exams using the '''Safe Exam Browser'''. Safe Exam Browser is offered under a Mozilla Public Licence. The application is available for Windows, macOS and iOS as open source software.
 
{{MediaPlayer | url =https://youtu.be/ytztYguXixk  | desc = Safe Exam Browser}}
Safe Exam Browser is offered under a Mozilla Public License. The application is available for Windows, macOS and iOS as freeware.
 
==Features==
==Features==
Safe Exam Browser is a customised web browser, available for Windows (7, 8.1, 10), macOS (starting 10.7, recommended 10.11 or newer) and iOS (9.3.5 or newer). The application must be [https://safeexambrowser.org/download downloaded and installed] on the device that the student uses to attempt the quiz. The restrictions placed on students are similar to those in the pop-up window case, but because Safe Exam Browser is software running on the student's computer, it can do a much more effective job of restricting their actions. If you select this option:
===Scope and functionality===
 
Safe Exam Browser is a customised web browser, available for Windows (7, 8.1, 10), macOS (starting 10.7, recommended 10.11 or newer) and iOS (9.3.5 or newer). The application must be [https://safeexambrowser.org/download downloaded and installed] on the device that the student uses to attempt the quiz. The restrictions placed on students are similar to those in the quiz ''Extra restrictions on attempts > Browser security'' "Full screen pop-up with some JavaScript security" case, but because Safe Exam Browser is software running on the student's computer, it can do a much more effective job of restricting their actions.
* Students will only be able to attempt the quiz if they are using Safe Exam Browser.
* Students will only be able to attempt the quiz if they are using Safe Exam Browser.
* The browser window won't have a URL or search field and back/forward navigation and reload can be disabled.
* The browser window won't have a URL or search field and back/forward navigation and reload can be disabled.
* SEB cannot be closed until the test is submitted.
* Safe Exam Browser cannot be closed until the test is submitted.
* Switching to other applications is disabled by default, but it's possible to allow to use specific third party applications during an exam.
* Switching to other applications is disabled by default, but it's possible to allow to use specific third-party applications during an exam.
* Shortcut keys such as Win+Tab, Alt+Tab, Ctrl+Alt+Del, Alt+F4, Print Screen, Cmd+Tab are disabled or cannot be used to close SEB or to switch to other user accounts on the computer.
* Shortcut keys such as Win+Tab, Alt+Tab, Ctrl+Alt+Del, Alt+F4, Print Screen, Cmd+Tab are disabled or cannot be used to close Safe Exam Browser or to switch to other user accounts on the computer. The possibility of taking screen shots is disabled.
* The clipboard is cleared when starting and quitting SEB.
* The clipboard is cleared when starting and quitting Safe Exam Browser.
* The browser context menu is disabled.
* The browser context menu is disabled.
* Specific web sites/pages/resources can be configured to be accessible during an exam, using a URL filter.
* Specific web sites/pages/resources can be configured to be accessible during an exam, using a URL filter.
* Spell checking and dictionary lookup is disabled, but can optionally be allowed.
* Spell checking and dictionary lookup is disabled, but can optionally be allowed.
In order to enable students to take an attempt with Safe Exam Browser, it is necessary to hand them a Safe Exam Browser configuration file which contains the rules applying.
This Safe Exam Browser configuration file can either be generated using the Safe Exam Browser config tool (the documentation can be found under [https://safeexambrowser.org/windows/win_usermanual_en.html#configuration https://safeexambrowser.org/windows/win_usermanual_en.html#configuration]) or directly within Moodle.
If done within Moodle, on a quiz page, students are offered some choices. They can – depending on your settings – either
# Download the Safe Exam Browser. This button redirects to the configured download location for Safe Exam Browser, default is [https://safeexambrowser.org/download_en.html https://safeexambrowser.org/download_en.html].
# Launch the Safe Exam Browser, which applies the settings and sends the students to the quiz starting page.<br/>Note: The "Launch Safe Exam Browser" button to start the quiz in Safe Exam Browser from another browser works with Safe Exam Browser 3.0.1 for Windows and Safe Exam Browser 2.1.5pre2 for macOS onwards only. For other Safe Exam Browser versions, please use "Download configuration" and then open the downloaded config file, which will start Safe Exam Browser into the quiz.
# Download the Safe Exam Browser configuration file. - This also allows you to use the configuration file as a template.
# Return to the Moodle course.
[[Image:SEB_Students-options.png|500px]]
Different measures assure that the Safe Exam Browser used for taking the quiz is in fact using the correct configuration and no modified or manipulated Safe Exam Browser can be used.
A [https://safeexambrowser.org/developer/documents/SEB-Specification-BrowserExamKey.pdf Browser Exam Key] or multiple Browser Exam Keys can be set to validate the SEB version(s) used by students to access the quiz, and to assure that the Safe Exam Browser client is correctly configured/secured for that specific quiz.
Another possibility is to use the Config Key. Then, during the quiz, Moodle sends its responses with a [https://safeexambrowser.org/developer/seb-config-key.html Config Key] custom HTTP request header, which is combined with the URL of the HTTP request into a SHA256 hash.
The following minimum versions of the Safe Exam Browser are required for use of the Config Key feature: macOS – 2.1.5pre2, Windows – 2.4, iOS – 2.1.16.
===Safe Exam Browser settings===
'''Require the use of Safe Exam Browser''' - Set whether students can only attempt the quiz using the Safe Exam Browser.
The available options are:
* ''No'': Safe Exam Browser is not required to attempt the quiz.
* ''Yes – Configure manually'': No template for the configuration of Safe Exam Browser will be used. You can configure Safe Exam Browser manually.
* ''Yes – Use an existing template'': A template for the configuration of Safe Exam Browser can be used. Templates are managed by the Moodle Administrator. Your manual settings overwrite the settings in the template.
* ''Yes – Upload my own config'': You can upload your own Safe Exam Browser configuration file. All manual settings and the use of templates will be disabled.
* ''Yes – Use SEB client config'': No configurations of Safe Exam Browser are on Moodle side. The quiz can be attempted with any configuration of Safe Exam Browser. You hand the Safe Exam Browser config file over to students by other means, like you did with Moodle ≤ 3.8.
''Yes – Use an existing template'' is only shown when there really are templates to choose from. If no administrator or manager has uploaded any template and set at least one to ''Enabled'', the option is not shown.
'''Safe Exam Browser config template''' - Choose a template for the configuration of Safe Exam Browser to apply. This setting is only shown if ''Require the use of Safe Exam Browser'' is set to ''Yes – Use an existing template'' and when there really are templates to choose from. If no administrator or manager has uploaded any template and set at least one to ''Enabled'', the option is not shown.
'''Show Safe Exam Browser download button''' - Set whether a button for Safe Exam Browser download will be shown on the quiz start page. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'', ''Yes – Use an existing template'', ''Yes – Upload my own config'' or ''Yes – Use SEB client config''.
'''Show Exit Safe Exam Browser button, configured with this quit link''' - In the according field you can enter a link to quit Safe Exam Browser. It will be used on an "Exit Safe Exam Browser" button on the page that appears after the exam is submitted. Clicking the button or a link to the same URL placed wherever you want to put it, it is possible to quit Safe Exam Browser without having to enter a quit password. If the field is left empty, then the "Exit Safe Exam Browser" button does not appear and there is no link set to quit Safe Exam Browser. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually''.
'''Ask user to confirm quitting''' - If enabled, users have to confirm quitting of Safe Exam Browser when a quit link is detected. Note this setting does just affect quitting with the quit link and doesn't affect quitting with the "Quit" button, Ctrl-Q or the close button in the main browser window. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually''.
'''Enable quitting of SEB''' - Set whether users can quit Safe Exam Browser with the "Quit" button in the Safe Exam Browser task bar or by pressing the keys Ctrl-Q or by clicking the main browser window close button. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' or ''Yes – Use an existing template''.
'''Quit password''' - Here, it is possible to provide a password which is prompted when users try to quit Safe Exam Browser with the "Quit" button, Ctrl-Q or the close button in the main browser window. If no quit password is set, then Safe Exam Browser just prompts "Are you sure you want to quit Safe Exam Browser?". Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' or ''Yes – Use an existing template''.
'''Enable reload in exam''' - Used to allowing page reload during a quiz (reload button in Safe Exam Browser task bar, browser tool bar, iOS side slider menu, keyboard shortcut F5/cmd+R). Offline caching might break when the user tries to reload a page without internet connection. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually''.
'''Show SEB task bar''' - Set whether users are shown the Safe Exam Browser task bar. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually''.
'''Show reload button''' - Set whether users are shown the reload user interface element in the task bar bottom right corner. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Show SEB task bar'' is set to ''Yes''.
'''Show time''' - Set whether users are shown an element in the task bar with the current time. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Show SEB task bar'' is set to ''Yes''.
'''Show keyboard layout''' - Set whether users are shown an element in the task bar to choose the keyboard layout. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Show SEB task bar'' is set to ''Yes''.
'''Show Wi-Fi control''' - Set whether users are shown an element in the task bar to choose the Wi-Fi. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Show SEB task bar'' is set to ''Yes''.
'''Enable audio controls''' - Set whether users are shown an element in the task bar to change the audio volume. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Show SEB task bar'' is set to ''Yes''.
'''Mute on startup''' - Set whether the audio volume is initially mute when Safe Exam Browser launches. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Show SEB task bar'' as well as ''Enable audio controls'' is set to ''Yes''.
'''Enable spell checking''' - Set whether spell checking is enabled in Safe Exam Browser. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually''.
'''Enable URL filtering''' - Set whether URL filtering is enabled in Safe Exam Browser. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually''.
'''Filter also embedded content''' - Set whether URL filtering applies to embedded content, too, in Safe Exam Browser. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Enable URL filtering'' is set to ''Yes''.
'''Expressions allowed''' - Insert a set of simple expressions URL are tested against and allowed for accessing during an exam. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Enable URL filtering'' is set to ''Yes''.
'''Regex allowed''' - Insert a set of regular expressions URL are tested against and allowed for accessing during an exam. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Enable URL filtering'' is set to ''Yes''.
'''Expressions blocked''' - Insert a set of simple expressions URL are tested against and blocked for accessing during an exam. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Enable URL filtering'' is set to ''Yes''.
'''Regex blocked''' - Insert a set of regular expressions URL are tested against and blocked for accessing during an exam. Can only be set if ''Require the use of Safe Exam Browser'' is set to ''Yes – Configure manually'' and ''Enable URL filtering'' is set to ''Yes''.


==Basic Usage Workflow==
'''Allowed browser exam keys''' - Insert allowed Browser Exam Keys for versions of Safe Exam Browser that are permitted to access this quiz. If no keys are entered, then Moodle does not check Browser Exam Keys. Can only be set if "Require the use of Safe Exam Browser" is set to "Yes – Upload my own config" or "Yes – Use SEB client config". When using the option "Yes – Upload my own config", you have to re-download the configuration file from the attempt quiz page (using the button "Download Configuration") and use that file to calculate the Browser Exam Key in each SEB version you want to allow for this quiz. These re-calculated Browser Exam Keys you need to copy-paste into the "Allowed browser exam keys" field (each key on a new line). The reason for this is that Moodle changes the Start URL setting value and formatting of the configuration file you initially uploaded to the quiz settings, therefore the Browser Exam Key changes. This doesn't apply when using the option "Yes – Use SEB client config". Remember that using the Config Key, which Moodle automatically calculates, is much easier.
Here is a basic workflow for integrating Safe Exam Browser into a Moodle quiz experience:
===What setting prevails===
# Teacher [https://safeexambrowser.org/download downloads and installs] Safe Exam Browser onto their local computer
If there's two different values for e.g. "Enable quitting of SEB" in the template and the user interface, the value in the user interfaces is taken more into consideration.
# Teacher configures the quiz to require the Safe Exam Browser. This setting is located at ''Extra restrictions on attempts > Browser security > Require Safe Exam Browser''
That means that a value not set/left empty does reset a value in the template.
# Teacher configures and saves a .seb file for students to download and open.  The .seb file contains a destination URL for the browser (this could be the address of the Moodle installation, or the specific URL of the Moodle quiz, or some other relevant URL) and any other Safe Exam Browser settings the teacher wants to enforce on the students' quiz experience.
#* Windows: Teacher uses the SEBConfigTool.exe program (distributed as part of the Safe Exam Browser package) to configure and save the .seb file ([https://safeexambrowser.org/windows/win_usermanual_en.html#configuration Windows configuration information])
#* Mac OS: Teacher opens the Preferences window of Safe Exam Browser to configure and save the .seb file ([https://safeexambrowser.org/macosx/mac_usermanual_en.html#configuration Mac OS configuration information])
# Teacher uploads the .seb file to the Moodle course page (or distributes it via another method)
# Student [https://safeexambrowser.org/download downloads and installs] Safe Exam Browser on their local computer
# Student downloads and opens the .seb file to go to the Moodle site and take the quiz.


==Upgrading Safe Exam Browser==
This table shows the combinations.
When you upgrade the Safe Exam Browser software, the Browser Exam Key value will change and you will need to update the settings in the Moodle quiz with the new value. Otherwise, your students may not be able to open the quiz. See [https://moodle.org/mod/forum/discuss.php?d=332344 this forum post].
{| class="wikitable" border="1"
|-
! style="text-align:left; vertical-align:top;" | Setting
! style="vertical-align:top; text-align:left;" | In template
! style="vertical-align:top; text-align:left;" | In Moodle
! style="vertical-align:top; text-align:left;" | Combined Config
|-
| '''Enable quitting of SEB'''
| yes
| yes
| yes
|-
| '''Quit password'''
| 123
| –
| –
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| yes
| yes
| yes
|-
| '''Quit password'''
| 123
| 456
| 456
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| no
| yes
| yes
|-
| '''Quit password'''
| 123
| –
| –
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| no
| yes
| yes
|-
| '''Quit password'''
| –
| –
| –
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| no
| yes
| yes
|-
| '''Quit password'''
| –
| 456
| 456
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| –
| no
| no
|-
| '''Quit password'''
| –
| –
| –
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| –
| yes
| yes
|-
| '''Quit password'''
| –
| –
| –
|-
| colspan="4" | &#160;
|-
| '''Enable quitting of SEB'''
| –
| yes
| yes
|-
| '''Quit password'''
| –
| 456
| 456
|-
| colspan="4" | ( "–" means not set)
|}
==Site administration settings==
Administrators can access Safe Exam Browser access rule configuration options by expanding ''Administration > Site administration > Plugins > Activity modules > Quiz > Safe Exam Browser access rule'' and manage Safe Exam Browser configuration templates under ''Administration > Site administration > Plugins > Activity modules > Quiz > Safe Exam Browser templates''. To restrict members of the faculty of being able to manipulate some settings, do apply capabilities to the roles.
===Templates===
Here, the administrator, manager or other persons with the required capabilities manage the Safe Exam Browser configuration templates which are presented to choose from when configuring a quiz.<br/>
In order to appear as choice options, templates have to be enabled.<br/>
The table gives an overview of the templates and whether they are available as choice as well as whether there are currently in use in some quiz.


==Chrome OS and Safe Exam Browser==
[[Image:SEB_Manage_templates.png|800px]]
Safe Exam Browser is currently only available for Windows, Mac and iOS. In order to lock everything down, SEB has to do a lot of operating-system-specific things. This is why it is only available for certain systems.


See [https://support.google.com/chrome/a/answer/3273084?hl=en this article] about three ways of using Chromebooks for student assessments: Chromebooks are a secure platform for administering student assessments, and when setup properly, these devices meet K-12 education testing standards. With Chromebooks, you can disable students’ access to browse the web during an exam in addition to disabling external storage, screenshots, and the ability to print.
==== Create a template: ====


See [https://moodle.org/mod/forum/discuss.php?d=278747 this forum thread] about Secure Quiz using Chromebook Kiosk App and User Agent.
# create a quiz and set the relevant settings for Safe Exam Browser.
# View the quiz page and select the "Download Configuration"
# On the "Add new template" form, use the downloaded configuration (*.seb file).
# "Save changes" to save the template.


See [http://cytochromec.net/blog/2015/05/secure-browser-for-testing-on-moodle-using-chromebooks-or-winmac/ this blog] about Secure Browser for testing on Moodle using Chromebooks or Win/Mac.
==== Editing a template ====
Editing a template will display the template contents as the '''raw''' plist format XML. This may be difficult to amend.


===iLearn Secure Browser for Chromebooks===
===General settings===
See [https://docs.google.com/document/d/1nf188E982fwwHjtQJHgYtyXoeXgAihODu99-WaS0HF0/edit this flyer] and also  [https://michiganmoodle.dearbornschools.org/plugins/a-new-moodle-open-source-secure-testing-application-using-chromebooks-for-k-12/ this video]] about iLearn Secure Browser for Chromebooks for K-12.
;Auto-configure SEB
:If enabled, users who navigate to the quiz using the Safe Exam Browser will be automatically forced to reconfigure their Safe Exam Browser.


See [https://moodle.org/mod/forum/discuss.php?d=358911#p1501380 this forum post] about Top Tech Tools to Build a Learning Platform.
;Show Safe Exam Browser config links
:Choose whether to show links for the user to access the Safe Exam Browser configuration file when access to quiz is prevented, and if so by which protocol, seb:// or http://.


==Securing a Moodle Quiz on an iPad==
;Safe Exam Browser download link
* Safe Exam Browser is also available for iOS and can be used to securely lock an iPad (and iPhone or iPod Touch) during a Moodle quiz. From version 2.1.13, the Browser Exam Key check is supported as well.
:The URL for downloading the Safe Exam Browser application.
* The Respondus LockDown Browser which carries out similar controls also works on iOS. See [https://www.respondus.com/products/lockdown-browser/ https://www.respondus.com/products/lockdown-browser/] for details.
* See [http://www.somerandomthoughts.com/blog/2014/10/01/securing-a-moodle-quiz-on-an-ipad/ this blog] by [https://moodle.org/user/profile.php?id=281671 Gavin Henrick] about Securing a Moodle Quiz on an iPad.


==See also==
;Quiz password required
:If enabled, all quizzes that require the Safe Exam Browser must have a quiz password set.


*[http://www.safeexambrowser.org/ Safeexambrowser.org]
;Display blocks before starting quiz
*MDL-19145 Moodle extension for Safe Exam Browser tracker issue
:If enabled, blocks will be displayed before a user attempts the quiz.
* Using Moodle [http://moodle.org/mod/forum/discuss.php?d=111732 New open source online-exam software available (with moodle-extension)] forum discussion


[[es:Navegador de examen seguro]]
;Display blocks after finishing quiz
:If enabled, blocks will be displayed after a user has finished their quiz attempt.
===Capabilities===
The following capabilities relate to the Safe Exam Browser quiz settings:
*[[Capabilities/quizaccess/seb:manage filemanager sebconfigfile|Change SEB quiz setting: Select SEB config file]]
*[[Capabilities/quizaccess/seb:manage seb activateurlfiltering|Change SEB quiz setting: Activate URL filtering]]
*[[Capabilities/quizaccess/seb:manage seb allowedbrowserexamkeys|Change SEB quiz setting: Allowed browser exam keys]]
*[[Capabilities/quizaccess/seb:manage seb allowreloadinexam|Change SEB quiz setting: Allow reload]]
*[[Capabilities/quizaccess/seb:manage seb allowspellchecking|Change SEB quiz setting: Enable spell checking]]
*[[Capabilities/quizaccess/seb:manage seb allowuserquitseb|Change SEB quiz setting: Allow quit]]
*[[Capabilities/quizaccess/seb:manage seb enableaudiocontrol|Change SEB quiz setting: Enable audio control]]
*[[Capabilities/quizaccess/seb:manage seb expressionsallowed|Change SEB quiz setting: Simple expressions allowed]]
*[[Capabilities/quizaccess/seb:manage seb expressionsblocked|Change SEB quiz setting: Simple expressions blocked]]
*[[Capabilities/quizaccess/seb:manage seb filterembeddedcontent|Change SEB quiz setting: Filter embedded content]]
*[[Capabilities/quizaccess/seb:manage seb linkquitseb|Change SEB quiz setting: Quit link]]
*[[Capabilities/quizaccess/seb:manage seb muteonstartup|Change SEB quiz setting: Mute on startup]]
*[[Capabilities/quizaccess/seb:manage seb quitpassword|Change SEB quiz setting: Quit password]]
*[[Capabilities/quizaccess/seb:manage seb regexallowed|Change SEB quiz setting: Regex expressions allowed]]
*[[Capabilities/quizaccess/seb:manage seb regexblocked|Change SEB quiz setting: Regex expressions blocked]]
*[[Capabilities/quizaccess/seb:manage seb requiresafeexambrowser|Change SEB quiz setting: Require Safe Exam Browser]]
*[[Capabilities/quizaccess/seb:manage seb showkeyboardlayout|Change SEB quiz setting: Show keyboard layout]]
*[[Capabilities/quizaccess/seb:manage seb showreloadbutton|Change SEB quiz setting: Show reload button]]
*[[Capabilities/quizaccess/seb:manage seb showsebtaskbar|Change SEB quiz setting: Show task bar]]
*[[Capabilities/quizaccess/seb:manage seb showtime|Change SEB quiz setting: Show time]]
*[[Capabilities/quizaccess/seb:manage seb showwificontrol|Change SEB quiz setting: Show Wi-Fi control]]
*[[Capabilities/quizaccess/seb:manage seb showsebdownloadlink|Change SEB quiz setting: Show download link]]
*[[Capabilities/quizaccess/seb:manage seb templateid|Change SEB quiz setting: Select SEB template]]
*[[Capabilities/quizaccess/seb:manage seb userconfirmquit|Change SEB quiz setting: Confirm on quit]]
*[[Capabilities/quizaccess/seb:managetemplates|Manage Safe Exam Browser templates]]
[[es:Safe Exam Browser]]
[[de:Safe Exam Browser]]
[[de:Safe Exam Browser]]

Latest revision as of 09:41, 22 August 2023

The quiz has built in settings to allow secure exams using the Safe Exam Browser. Safe Exam Browser is offered under a Mozilla Public Licence. The application is available for Windows, macOS and iOS as open source software.

Safe Exam Browser

Features

Scope and functionality

Safe Exam Browser is a customised web browser, available for Windows (7, 8.1, 10), macOS (starting 10.7, recommended 10.11 or newer) and iOS (9.3.5 or newer). The application must be downloaded and installed on the device that the student uses to attempt the quiz. The restrictions placed on students are similar to those in the quiz Extra restrictions on attempts > Browser security "Full screen pop-up with some JavaScript security" case, but because Safe Exam Browser is software running on the student's computer, it can do a much more effective job of restricting their actions.

  • Students will only be able to attempt the quiz if they are using Safe Exam Browser.
  • The browser window won't have a URL or search field and back/forward navigation and reload can be disabled.
  • Safe Exam Browser cannot be closed until the test is submitted.
  • Switching to other applications is disabled by default, but it's possible to allow to use specific third-party applications during an exam.
  • Shortcut keys such as Win+Tab, Alt+Tab, Ctrl+Alt+Del, Alt+F4, Print Screen, Cmd+Tab are disabled or cannot be used to close Safe Exam Browser or to switch to other user accounts on the computer. The possibility of taking screen shots is disabled.
  • The clipboard is cleared when starting and quitting Safe Exam Browser.
  • The browser context menu is disabled.
  • Specific web sites/pages/resources can be configured to be accessible during an exam, using a URL filter.
  • Spell checking and dictionary lookup is disabled, but can optionally be allowed.

In order to enable students to take an attempt with Safe Exam Browser, it is necessary to hand them a Safe Exam Browser configuration file which contains the rules applying. This Safe Exam Browser configuration file can either be generated using the Safe Exam Browser config tool (the documentation can be found under https://safeexambrowser.org/windows/win_usermanual_en.html#configuration) or directly within Moodle.

If done within Moodle, on a quiz page, students are offered some choices. They can – depending on your settings – either

  1. Download the Safe Exam Browser. This button redirects to the configured download location for Safe Exam Browser, default is https://safeexambrowser.org/download_en.html.
  2. Launch the Safe Exam Browser, which applies the settings and sends the students to the quiz starting page.
    Note: The "Launch Safe Exam Browser" button to start the quiz in Safe Exam Browser from another browser works with Safe Exam Browser 3.0.1 for Windows and Safe Exam Browser 2.1.5pre2 for macOS onwards only. For other Safe Exam Browser versions, please use "Download configuration" and then open the downloaded config file, which will start Safe Exam Browser into the quiz.
  3. Download the Safe Exam Browser configuration file. - This also allows you to use the configuration file as a template.
  4. Return to the Moodle course.

SEB Students-options.png

Different measures assure that the Safe Exam Browser used for taking the quiz is in fact using the correct configuration and no modified or manipulated Safe Exam Browser can be used.

A Browser Exam Key or multiple Browser Exam Keys can be set to validate the SEB version(s) used by students to access the quiz, and to assure that the Safe Exam Browser client is correctly configured/secured for that specific quiz.

Another possibility is to use the Config Key. Then, during the quiz, Moodle sends its responses with a Config Key custom HTTP request header, which is combined with the URL of the HTTP request into a SHA256 hash. The following minimum versions of the Safe Exam Browser are required for use of the Config Key feature: macOS – 2.1.5pre2, Windows – 2.4, iOS – 2.1.16.

Safe Exam Browser settings

Require the use of Safe Exam Browser - Set whether students can only attempt the quiz using the Safe Exam Browser. The available options are:

  • No: Safe Exam Browser is not required to attempt the quiz.
  • Yes – Configure manually: No template for the configuration of Safe Exam Browser will be used. You can configure Safe Exam Browser manually.
  • Yes – Use an existing template: A template for the configuration of Safe Exam Browser can be used. Templates are managed by the Moodle Administrator. Your manual settings overwrite the settings in the template.
  • Yes – Upload my own config: You can upload your own Safe Exam Browser configuration file. All manual settings and the use of templates will be disabled.
  • Yes – Use SEB client config: No configurations of Safe Exam Browser are on Moodle side. The quiz can be attempted with any configuration of Safe Exam Browser. You hand the Safe Exam Browser config file over to students by other means, like you did with Moodle ≤ 3.8.

Yes – Use an existing template is only shown when there really are templates to choose from. If no administrator or manager has uploaded any template and set at least one to Enabled, the option is not shown.

Safe Exam Browser config template - Choose a template for the configuration of Safe Exam Browser to apply. This setting is only shown if Require the use of Safe Exam Browser is set to Yes – Use an existing template and when there really are templates to choose from. If no administrator or manager has uploaded any template and set at least one to Enabled, the option is not shown.

Show Safe Exam Browser download button - Set whether a button for Safe Exam Browser download will be shown on the quiz start page. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually, Yes – Use an existing template, Yes – Upload my own config or Yes – Use SEB client config.

Show Exit Safe Exam Browser button, configured with this quit link - In the according field you can enter a link to quit Safe Exam Browser. It will be used on an "Exit Safe Exam Browser" button on the page that appears after the exam is submitted. Clicking the button or a link to the same URL placed wherever you want to put it, it is possible to quit Safe Exam Browser without having to enter a quit password. If the field is left empty, then the "Exit Safe Exam Browser" button does not appear and there is no link set to quit Safe Exam Browser. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually.

Ask user to confirm quitting - If enabled, users have to confirm quitting of Safe Exam Browser when a quit link is detected. Note this setting does just affect quitting with the quit link and doesn't affect quitting with the "Quit" button, Ctrl-Q or the close button in the main browser window. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually.

Enable quitting of SEB - Set whether users can quit Safe Exam Browser with the "Quit" button in the Safe Exam Browser task bar or by pressing the keys Ctrl-Q or by clicking the main browser window close button. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually or Yes – Use an existing template.

Quit password - Here, it is possible to provide a password which is prompted when users try to quit Safe Exam Browser with the "Quit" button, Ctrl-Q or the close button in the main browser window. If no quit password is set, then Safe Exam Browser just prompts "Are you sure you want to quit Safe Exam Browser?". Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually or Yes – Use an existing template.

Enable reload in exam - Used to allowing page reload during a quiz (reload button in Safe Exam Browser task bar, browser tool bar, iOS side slider menu, keyboard shortcut F5/cmd+R). Offline caching might break when the user tries to reload a page without internet connection. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually.

Show SEB task bar - Set whether users are shown the Safe Exam Browser task bar. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually.

Show reload button - Set whether users are shown the reload user interface element in the task bar bottom right corner. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Show SEB task bar is set to Yes.

Show time - Set whether users are shown an element in the task bar with the current time. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Show SEB task bar is set to Yes.

Show keyboard layout - Set whether users are shown an element in the task bar to choose the keyboard layout. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Show SEB task bar is set to Yes.

Show Wi-Fi control - Set whether users are shown an element in the task bar to choose the Wi-Fi. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Show SEB task bar is set to Yes.

Enable audio controls - Set whether users are shown an element in the task bar to change the audio volume. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Show SEB task bar is set to Yes.

Mute on startup - Set whether the audio volume is initially mute when Safe Exam Browser launches. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Show SEB task bar as well as Enable audio controls is set to Yes.

Enable spell checking - Set whether spell checking is enabled in Safe Exam Browser. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually.

Enable URL filtering - Set whether URL filtering is enabled in Safe Exam Browser. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually.

Filter also embedded content - Set whether URL filtering applies to embedded content, too, in Safe Exam Browser. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Enable URL filtering is set to Yes.

Expressions allowed - Insert a set of simple expressions URL are tested against and allowed for accessing during an exam. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Enable URL filtering is set to Yes.

Regex allowed - Insert a set of regular expressions URL are tested against and allowed for accessing during an exam. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Enable URL filtering is set to Yes.

Expressions blocked - Insert a set of simple expressions URL are tested against and blocked for accessing during an exam. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Enable URL filtering is set to Yes.

Regex blocked - Insert a set of regular expressions URL are tested against and blocked for accessing during an exam. Can only be set if Require the use of Safe Exam Browser is set to Yes – Configure manually and Enable URL filtering is set to Yes.

Allowed browser exam keys - Insert allowed Browser Exam Keys for versions of Safe Exam Browser that are permitted to access this quiz. If no keys are entered, then Moodle does not check Browser Exam Keys. Can only be set if "Require the use of Safe Exam Browser" is set to "Yes – Upload my own config" or "Yes – Use SEB client config". When using the option "Yes – Upload my own config", you have to re-download the configuration file from the attempt quiz page (using the button "Download Configuration") and use that file to calculate the Browser Exam Key in each SEB version you want to allow for this quiz. These re-calculated Browser Exam Keys you need to copy-paste into the "Allowed browser exam keys" field (each key on a new line). The reason for this is that Moodle changes the Start URL setting value and formatting of the configuration file you initially uploaded to the quiz settings, therefore the Browser Exam Key changes. This doesn't apply when using the option "Yes – Use SEB client config". Remember that using the Config Key, which Moodle automatically calculates, is much easier.

What setting prevails

If there's two different values for e.g. "Enable quitting of SEB" in the template and the user interface, the value in the user interfaces is taken more into consideration. That means that a value not set/left empty does reset a value in the template.

This table shows the combinations.

Setting In template In Moodle Combined Config
Enable quitting of SEB yes yes yes
Quit password 123
 
Enable quitting of SEB yes yes yes
Quit password 123 456 456
 
Enable quitting of SEB no yes yes
Quit password 123
 
Enable quitting of SEB no yes yes
Quit password
 
Enable quitting of SEB no yes yes
Quit password 456 456
 
Enable quitting of SEB no no
Quit password
 
Enable quitting of SEB yes yes
Quit password
 
Enable quitting of SEB yes yes
Quit password 456 456
( "–" means not set)

Site administration settings

Administrators can access Safe Exam Browser access rule configuration options by expanding Administration > Site administration > Plugins > Activity modules > Quiz > Safe Exam Browser access rule and manage Safe Exam Browser configuration templates under Administration > Site administration > Plugins > Activity modules > Quiz > Safe Exam Browser templates. To restrict members of the faculty of being able to manipulate some settings, do apply capabilities to the roles.

Templates

Here, the administrator, manager or other persons with the required capabilities manage the Safe Exam Browser configuration templates which are presented to choose from when configuring a quiz.
In order to appear as choice options, templates have to be enabled.
The table gives an overview of the templates and whether they are available as choice as well as whether there are currently in use in some quiz.

SEB Manage templates.png

Create a template:

  1. create a quiz and set the relevant settings for Safe Exam Browser.
  2. View the quiz page and select the "Download Configuration"
  3. On the "Add new template" form, use the downloaded configuration (*.seb file).
  4. "Save changes" to save the template.

Editing a template

Editing a template will display the template contents as the raw plist format XML. This may be difficult to amend.

General settings

Auto-configure SEB
If enabled, users who navigate to the quiz using the Safe Exam Browser will be automatically forced to reconfigure their Safe Exam Browser.
Show Safe Exam Browser config links
Choose whether to show links for the user to access the Safe Exam Browser configuration file when access to quiz is prevented, and if so by which protocol, seb:// or http://.
Safe Exam Browser download link
The URL for downloading the Safe Exam Browser application.
Quiz password required
If enabled, all quizzes that require the Safe Exam Browser must have a quiz password set.
Display blocks before starting quiz
If enabled, blocks will be displayed before a user attempts the quiz.
Display blocks after finishing quiz
If enabled, blocks will be displayed after a user has finished their quiz attempt.

Capabilities

The following capabilities relate to the Safe Exam Browser quiz settings: